$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe77f6d6-4126-4dd1-bda3-20275e2a831c.roa File: fe77f6d6-4126-4dd1-bda3-20275e2a831c.roa (raw, json) Hash identifier: GEdgDDinaHt3oWl5ipy5/lUSCetUYg4xFIbvZIpL+uM= Subject key identifier: D4:C9:32:40:F4:BB:43:B6:D4:48:70:14:CD:D2:35:FB:49:6D:89:AA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2FF26C198ED658971A03EC50CBC20F3BBE2C28EC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe77f6d6-4126-4dd1-bda3-20275e2a831c.roa Signing time: Fri 22 Aug 2025 00:30:20 +0000 ROA not before: Fri 22 Aug 2025 00:30:20 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 203.110.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f2:6c:19:8e:d6:58:97:1a:03:ec:50:cb:c2:0f:3b:be:2c:28:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 22 00:30:20 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=dd698db28acb0ff0a18f4f457f80fbab27ab9d527ba148bbd9c4b408298ae876, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:af:12:1c:88:03:f2:38:04:67:f6:af:70:41: 6a:9d:75:a6:c6:ce:52:10:b6:49:22:45:d2:6a:e7: b5:0b:54:7f:39:60:a8:a5:ef:2e:7c:59:0d:2a:f4: 72:ad:c5:1c:35:36:6e:56:30:c2:fd:b5:bc:e5:ca: ba:11:94:f6:dc:60:c2:9e:04:95:04:1b:a9:2a:07: 01:9a:5c:7b:ea:2f:c0:6e:de:ec:bf:ff:4b:d5:00: 1c:2c:31:07:cf:79:28:25:6c:43:0c:c0:2d:76:ad: 3a:3d:3a:6b:22:e3:0e:27:c9:20:00:50:58:1c:f2: 8b:2e:01:79:58:98:f9:6b:70:39:d1:5c:76:81:a0: d3:99:85:f3:f7:f4:84:6d:fe:d0:51:32:e1:b4:c6: 26:3c:9f:1f:9a:fd:35:8e:dc:f9:5c:cc:c9:27:7f: 43:3f:a7:fe:a2:e9:1f:cf:25:73:de:0b:79:cd:c4: 6a:52:86:f2:34:ea:09:12:16:f3:51:25:23:eb:c5: 2f:84:b1:c6:39:4b:b3:6a:34:fc:05:00:5d:34:e5: e3:a1:51:61:63:0e:24:d8:e9:ec:69:de:6d:3d:da: 52:7b:e6:8a:c8:09:15:09:53:1e:bf:4b:ce:f0:f9: 0e:4e:52:6a:05:51:c2:00:95:22:36:7c:16:f6:71: ad:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C9:32:40:F4:BB:43:B6:D4:48:70:14:CD:D2:35:FB:49:6D:89:AA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe77f6d6-4126-4dd1-bda3-20275e2a831c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.110.205.0/24 Signature Algorithm: sha256WithRSAEncryption 25:ad:3a:6e:ec:65:4b:df:e1:01:61:d6:05:fe:eb:b1:64:99: 9b:10:61:17:a3:93:41:f7:5f:b9:7f:f5:e8:9b:d2:2e:70:d1: b8:41:33:8f:95:82:4c:51:e5:23:81:ff:54:23:27:b7:ad:33: 1f:61:c1:cb:7c:1b:12:31:06:ca:b5:25:29:2e:e2:e4:81:c9: a2:99:4a:59:65:1f:ec:c6:04:b2:f2:8a:0a:7c:3b:cf:66:84: b2:2c:b0:e7:31:01:02:70:15:77:44:0a:7b:a7:9e:e8:13:7f: f0:8f:41:87:26:89:7b:98:9e:fd:6a:ba:df:e0:13:be:6a:4f: 89:bd:a0:5c:0c:58:45:84:ee:9e:6f:62:df:ed:0d:44:b3:40: fb:38:56:cd:ee:65:36:ba:4e:1a:38:48:ee:82:26:31:38:b0: fc:dd:91:8d:02:33:27:1a:14:5f:55:33:29:ec:d6:ca:26:9f: f8:b0:7f:a1:ab:40:82:76:a3:53:55:a5:b1:e2:f9:52:fb:b5: ed:79:6b:58:ec:55:10:ed:72:68:da:65:21:de:18:3a:ee:b5: 2b:af:48:d0:e1:f7:ac:5e:f6:35:5c:09:bd:ed:7f:a3:a5:ed: 47:fe:d5:bf:c7:86:63:69:6d:25:f2:06:24:e0:f3:ac:dc:fd: ab:31:44:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL/JsGY7WWJcaA+xQy8IPO74sKOwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODIyMDAzMDIwWhcNMjUwOTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDY5OGRiMjhhY2IwZmYwYTE4ZjRmNDU3ZjgwZmJhYjI3 YWI5ZDUyN2JhMTQ4YmJkOWM0YjQwODI5OGFlODc2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZrxIciAPyOARn9q9wQWqddabGzlIQtkkiRdJq57ULVH85 YKil7y58WQ0q9HKtxRw1Nm5WMML9tbzlyroRlPbcYMKeBJUEG6kqBwGaXHvqL8Bu 3uy//0vVABwsMQfPeSglbEMMwC12rTo9Omsi4w4nySAAUFgc8osuAXlYmPlrcDnR XHaBoNOZhfP39IRt/tBRMuG0xiY8nx+a/TWO3PlczMknf0M/p/6i6R/PJXPeC3nN xGpShvI06gkSFvNRJSPrxS+EscY5S7NqNPwFAF005eOhUWFjDiTY6exp3m092lJ7 5orICRUJUx6/S87w+Q5OUmoFUcIAlSI2fBb2ca3DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1MkyQPS7Q7bUSHAUzdI1+0ltiaowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZlNzdmNmQ2LTQxMjYtNGRkMS1iZGEzLTIwMjc1ZTJhODMxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADLbs0wDQYJKoZIhvcNAQELBQADggEBACWtOm7sZUvf4QFh1gX+67FkmZsQ YRejk0H3X7l/9eib0i5w0bhBM4+VgkxR5SOB/1QjJ7etMx9hwct8GxIxBsq1JSku 4uSByaKZSlllH+zGBLLyigp8O89mhLIssOcxAQJwFXdECnunnugTf/CPQYcmiXuY nv1qut/gE75qT4m9oFwMWEWE7p5vYt/tDUSzQPs4Vs3uZTa6Tho4SO6CJjE4sPzd kY0CMycaFF9VMyns1somn/iwf6GrQIJ2o1NVpbHi+VL7te15a1jsVRDtcmjaZSHe GDrutSuvSNDh96xe9jVcCb3tf6Ol7Uf+1b/HhmNpbSXyBiTg86zc/asxRLM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:04:44 2025 by rpki-client